Since 25 May 2018, the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (commonly referred to as the “GDPR”) shall enter into force. The GDPR will be applicable to the same extent in all European Union countries, thus also in Poland, and shall introduce a number of amendments to the rules governing the processing of personal data, which will affect many areas of life, including the use of websites of the General Directorate for Environmental Protection.
Please find below the issues on the processing of personal data of persons visiting the websites of the General Directorate for Environmental Protection.
What is personal data?
Pursuant to the GDPR, personal data means any information relating to an identified or identifiable natural person. In the case of using our websites, such data is e.g. e-mail address, IP address or data contained in the email account name or in other service offered by the General Directorate for Environmental Protection. Personal data may be stored in cookie files or similar technologies (e.g. local storage) installed in the IT systems of the General Directorate of Environmental Protection, which are used when using our services. On our websites and applications, we use the above-mentioned technologies to collect and process personal data.
Please note that as part of the websites being made available, we will process your personal data as the data controller based on a legitimate interest.
Consent, which is voluntary, is necessary to review the resources of the General Directorate for Environmental Protection. If you do not agree to the technologies used, please close the site and remove cookie files from your device.
Personal data controller
The controller of your personal data is the General Director for Environmental Protection based in Warsaw, ul. Wawelska 52/54, 00-922 Warsaw, e-mail: firstname.lastname@example.org.
Legal basis and purpose of processing
The GDPR provides for several types of legal basis for data processing. Your personal data will be processed in your consent to the processing of your personal data as referred to in Article 6(1)(a) of the GDPR and for the purpose of complying with the legal obligation imposed on the data controller, pursuant to Article 6(1)(c) of the GDPR, implementing a task carried out in public interest or as part of exercising public authority entrusted to the data controller, pursuant to Article 6(1)(e) of the GDPR.
Personal data processing time
The time for which we will process personal data depends on the legal basis constituting a legal condition for the processing of personal data by the GDEP. We will never process personal data for a period longer than that resulting from the legal bases. Your data will always be processed for a period necessary for implementing the purpose of processing, including the archiving obligation resulting from the legislation.
Pursuant to the GDPR, you have the following rights related to the processing of personal data on our websites:
- right to request the data controller to provide access to personal data,
- right to request the data controller to rectify personal data,
- right to request the data controller to delete personal data,
- right to request the data controller to restrict the processing of personal data,
- right to lodge an objection with regard to the processing of personal data,
- right to bring a complaint to the supervisory authority – to the President of the Personal Data Protection Office.
Data transfer and profiling
Data may be transferred to other public authorities provided that:
- these authorities are authorised by the applicable legislation,
- they implement a legal obligation imposed on the personal data controller,
- processing is necessary to implement a task carried out in public interest,
- as part of exercising public power entrusted to the personal data controller.
The transfer of data does not relieve the transferor of responsibility for its processing. Your data will not be transferred to third countries.
Data collected by the websites of the General Directorate for Environmental Protection is not and will not be profiled.